Privacy policy

We collect the minimum data needed to run your vault. This policy explains what we hold and why.

1. What we collect

Account details, the ciphertext you upload and the metadata required to serve and bill it. We never collect your master key or any plaintext.

2. How we use it

To run your vault, deliver archival and keep the service secure. We never use your data to train anything.

3. Data retention

You control retention. Ciphertext is held for your archival window, then deleted on your instruction.

4. Your rights

You may request access, correction or deletion of your data at any time by emailing privacy@gilt.vault.